Overview

overview

7

Static

static

3

d31468c4f6...0N.exe

windows7-x64

7

d31468c4f6...0N.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    d31468c4f6c9cbbd32df21225a6d46f0N.exe

  • Size

    170KB

  • Sample

    240905-ef5qlatdpb

  • MD5

    d31468c4f6c9cbbd32df21225a6d46f0

  • SHA1

    472ce0e5cb6721a9524588eac92d4ed920d65766

  • SHA256

    9034c5edb595718197824756670dfa52bf7f8cefa86908025d66991da5d757cd

  • SHA512

    b671c8def630fc4e2210efffb92bdaf0ba1877b858dffe5bc14533c03841b0341bc45b9f9f41c89bdba3f924cda25cebb307c69dbba86b3e46bedf285cc572e7

  • SSDEEP

    3072:6JpOm5axh63laEo+pXX1pQD2UCohD8mxLCj+5cmeDye42L712xrpdJ8xLeb7UD:cAm5oh63laEo+pXX1pkF8mxeq5+4m713

Score
7/10
discovery

Malware Config

Targets

    • Target

      d31468c4f6c9cbbd32df21225a6d46f0N.exe

    • Size

      170KB

    • MD5

      d31468c4f6c9cbbd32df21225a6d46f0

    • SHA1

      472ce0e5cb6721a9524588eac92d4ed920d65766

    • SHA256

      9034c5edb595718197824756670dfa52bf7f8cefa86908025d66991da5d757cd

    • SHA512

      b671c8def630fc4e2210efffb92bdaf0ba1877b858dffe5bc14533c03841b0341bc45b9f9f41c89bdba3f924cda25cebb307c69dbba86b3e46bedf285cc572e7

    • SSDEEP

      3072:6JpOm5axh63laEo+pXX1pQD2UCohD8mxLCj+5cmeDye42L712xrpdJ8xLeb7UD:cAm5oh63laEo+pXX1pkF8mxeq5+4m713

    Score
    7/10
    discovery

    • Executes dropped EXE

    • Loads dropped DLL

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    • Maps connected drives based on registry

      Disk information is often read in order to detect sandboxing environments.

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks